A Warning from the FBI and CISA

In a recent warning, the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have raised alarms over the national security threats posed by Chinese-made drones.

READ DJI’S RESPONSE: DJI’S FIRM STANCE AGAINST FBI AND CISA SECURITY ALLEGATIONS

The Unseen Drone Danger Above

The public guidance issued by the FBI and CISA warns of the “significant risk” posed by Chinese drones to U.S. critical infrastructure. This data security concern stems from the legal authority granted to the Chinese government, which allows them to access data held by Chinese companies. Consequently, drones become potential conduits for sensitive information to reach Beijing, revealing vulnerabilities in U.S. infrastructure.

The 2019 Industry Alert and Recent Developments

This warning isn’t the first of its kind. Back in 2019, a CISA alert, initially for official use only, signaled similar concerns.

The latest announcement follows a bipartisan appeal led by Senate Intelligence Committee Chairman Mark Warner to CISA, urging a reevaluation of the risks associated with Chinese-manufactured drones.

Market Dominance and Data Security Risks of DJI Drones

The dominance of Chinese company Shenzhen DJI Innovation Technology in the U.S. drone market is reportedly particularly alarming.

With almost 90% of the consumer market and over 70% of the industrial market in North America, the potential for data leakage is supposedly enormous.

A 2017 Department of Homeland Security assessment revealed how data from a DJI drone used by a vineyard owner could assist Chinese companies in strategic land purchases.

It makes you wonder if Google Maps or Apple Maps couldn’t have done the same…

Fbi And Cisa Warn Chinese Drones Are Threat And Compromise U.s. Security 1

The View from Experts

Brian Harrell, a former CISA official, underscores the importance of the new guidance.

According to him, the widespread use of Chinese drones by law enforcement and critical infrastructure operators is a clear and present danger.

He emphasizes that this isn’t an exaggerated threat; data leaks to overseas entities are real, even though we have yet to see any evidence of such claims.

“This is not the boogeyman, as we’ve seen these drones leak data overseas, and it’s good to see government agencies call out the threat,” said Harrell, a former assistant secretary at the Department of Homeland Security who authored the 2019 alert, according to The Record. “It’s clear that the government has deemed Chinese-made drones a threat to national security.”

Drone Miniaturization and Its Implications

Harrell points out the trend of miniaturization in drone technology, which has capitalized on.

Smaller, cheaper, yet high-performance drones have become increasingly popular in various sectors, including infrastructure and public safety.

However, the convenience and efficiency they bring also open doors for espionage and data exfiltration, he argues.

It is important, to point out here that the miniaturization trend originates from the 250-gram weight limit adopted and set by the Federal Aviation Administration (FAA) for the registration of drones.

Drones, such as the Pro, that weigh less than 250-grams do not need to be registered with the FAA when flown recreationally.

This FAA registration exception created a market for lightweight drones, which indeed is an opportunity that DJI capitalized on at a scale unmatched yet any other drone maker.

Dji Mini 4 Pro Black Friday Deals: Save Big On The Latest Dji Drone - Dji Mini 4 Pro: A High-Flying Controversy Bound By The 120-Meter Ceiling?
The DJI Mini 4 Pro is a very capable drone weighing less than 250 grams.

The Risks Laid Bare

The FBI and CISA’s new public guidance doesn’t mince words about the risks posed by these unmanned aircraft systems (UAS).

Bryan Vorndran, assistant director of the FBI’s Cyber Division, states that without proper safeguards, the widespread deployment of these drones is a national security concern, with risks of unauthorized access to systems and data.

Beyond Chinese-Made Drones

The guidance extends its caution to all drones, urging companies to adhere to “secure-by design principles” even for domestically manufactured drones.

Organizations are advised to stay vigilant with up-to-date patches, firmware, and a comprehensive cybersecurity strategy for all Internet of Things (IoT) devices.

Mitigating the Threat

The guidance provides detailed instructions for mitigating these risks. Key recommendations include:

  • Integrating drones into the organization’s cybersecurity structure.
  • Creating separate networks for drones to isolate potential threats.
  • Employing a zero-luottaa framework.
  • Establishing robust vulnerability management programs.
  • Regularly analyzing logs for anomalies.
  • Ensuring strong encryption for data-at-rest and data-in-transit.
  • Periodically erasing collected data after transfer.
  • Using VPNs for secure drone operations.

A Call for Vigilance

The claimed threat posed by Chinese-made drones underscores the need for continuous vigilance and proactive measures in cybersecurity, warn the FBI and CISA. As technology evolves, so do the methods of exploitation and espionage.

The FBI and CISA’s guidance is meant to remind us of the importance of securing not just our networks, but also the skies above us.

The Yet-To-Be-Released Dji Air 3 Will Be Remote Id Compatible. Dji Air 3 Specs Leaked: 1/1.3-Inch-Cmos Sensor, 46 Min, O4, 4K Hdr Video
The complies with the FAA requirements.

DroneXL’s Take

Rethinking the Data Security Concerns Around DJI Drones: A Critical Analysis

In the realm of modern technology, the security of data transmitted and stored by devices is paramount.

Among these, Chinese-made DJI drones have been a subject of intense debate, primarily centered around the allegations of data leaks to the Chinese government.

However, a closer examination of these claims, the steps taken by DJI, and the broader technological landscape suggests that these fears might be more speculative than substantiated.

Scrutinizing the Allegations

For years, allegations have swirled around DJI drones, claiming they serve as conduits for sending sensitive data to China.

Prominent voices in this debate have included U.S. politicians and competitors like , who have a vested interest in amplifying these concerns.

READ: BLUE SUAS PROBLEMS AND FLORIDA DMS SECRETARY ACCUSED OF PIMPING FOR SKYDIO

This fear mongering narrative, though persistent, lacks a foundational element: credible evidence.

The U.S. media and public have yet to encounter any concrete proof of these alleged data leaks.

Skydio X10 In Flight
US-assembled, not US-made Skydio X10 drone.

DJI’s Proactive Measures

In response to these concerns, DJI has taken proactive steps to allay fears and enhance the security of its drones.

A significant development was DJI’s collaboration with the Department of the Interior, resulting in the creation of a ‘Government Edition’ of two of their drones.

The drones were designed to be 100% safe and secure, addressing specific security requirements of the U.S. government.

Furthermore, DJI separately introduced ‘local data mode’ in its latest drone models, ensuring that data does not go online and thus cannot be transmitted externally.

The scrutiny of DJI drones has not been limited to hearsay. Numerous independent researchers and security consultants have investigated these Chinese-made drones, and their findings have been consistent: no data leaks have been detected.

This raises an important question: if data security is a legitimate and urgent concern, why has there been no tangible evidence of data transmission to the Chinese government?

The Broader Technological Context

The focus on DJI drones also seems disproportionate when viewed within the larger technological ecosystem.

Products like Chinese-made cars, smartphones, tablets, computers, scanners, smart speakers, security cameras, and various software and apps, many of which are also produced in China, do not attract the same level of scrutiny.

This discrepancy raises questions about the consistency of security concerns across different types of technology.

A Call for Evidence-Based Discourse

The narrative surrounding the data security of DJI drones has been dominated more by speculation than by evidence.

While the potential for data leaks in any technology should not be dismissed lightly, a balanced approach requires credible evidence to support such claims.

In the absence of such proof, it becomes imperative to revisit and reassess these concerns, ensuring that discourse in the realm of technology and national security is grounded in reality, not in conjecture.

Furthermore, no other drone company has had such an impact on saving American lives, and keeping American , firemen, and policemen safe as the capable, available, durable, safe, affordable, easy-to-fly DJI drones.

Banning or restricting these Chinese-made DJI drones based on unsubstantiated data security fears and concerns will cost American lives and will put our first responders’ lives at risk.

Drone Numbers - Dji Launches The Ultimate Foldable Dji Enterprise Drone, The Dji Matrice 30 Or M30, And More...
Introducing the drone.

Let us know your thoughts

We are curious to hear your thoughts on DJI drones, data leaks, and national security. Do you think that these fears are overblown? Do you think that Chinese-made drones are indeed spying on us?

Let us know what you think in the comments below.


Discover more from DroneXL.co

Subscribe to get the latest posts sent to your email.

Haye Kesteloo
Haye Kesteloo

Haye Kesteloo on pääkirjoitustoimittaja ja perustaja DroneXL.co, jossa hän kattaa kaikki droneihin liittyvät uutiset, DJI-huhut ja kirjoittaa drone-arvosteluja, ja EVXL.co, kaikki sähköajoneuvoihin liittyvät uutiset. Hän on myös toinen isäntä PiXL Drone Show YouTubessa ja muilla podcast-alustoilla. Hayen tavoittaa osoitteesta haye @ dronexl.co tai @hayekesteloo.

Articles: 4235

6 Comments

  1. There’s a simple fix for all this: require the firmware and control app to be open source, make it illegal to require users to sign in or share any data with a third party in order to fly a drone that you own.

  2. My only reply on this is you can go on Google Maps and see nearly every single US military base. So what’s the difference? An Ariel photo on Google Maps is just as damning as a photo from a drone!!!

  3. iPhones and Androids can drill down even further, straight into our pants pockets and measure the temperature of our genitalia for chrissakes! And BigGubmintCheez gets to tell us what we can and can’t buy?! To hell with them, OUR Gubmint WORKS at OUR BEHEST and we tell them how we are to be governed.

  4. I don’t entirely disagree there is a potential for a security breach, given how the CCP operates and the control it has over everything in China. Is there the same or likely greater potential for many other Chinese made devices? Yes, and they would be even more concerning with more information available. Unfortunately though, no US based consumer drones compete with them. Perhaps instead of trying to fight DJI, this administration should do everything it can to remove regulatory burdens and high commodity prices from US companies, so we can produce a drone just as good if not better. However, our government has done just the opposite and we wonder why US companies just can’t compete.

  5. They create the boogeyman,so they can validate restriction,and levy some fees, to save everyone from the boogeyman.

Vastaa

This site uses Akismet to reduce spam. Learn how your comment data is processed.

fiFinnish